Closed howlbot-integration[bot] closed 3 months ago
This poses a security risk in case of malicious owner, since disallowedTokens can be withdrawn by owner
koolexcrypto changed the severity to QA (Quality Assurance)
This previously downgraded issue has been upgraded by koolexcrypto
koolexcrypto marked the issue as primary issue
koolexcrypto marked the issue as duplicate of #90
koolexcrypto marked the issue as unsatisfactory: Invalid
Lines of code
https://github.com/code-423n4/2024-05-loop/blob/main/src/PrelaunchPoints.sol#L364
Vulnerability details
Impact
The absence of a disallowToken function in the "PrelaunchPoints" smart contract could potentially lead to various risks and limitations:
Inability to remove unsupported or problematic tokens from the contract's list of supported tokens.
Proof of Concept
Tools Used
Visual Studio Code
Recommended Mitigation Steps
Design the disallowToken function to allow the contract owner to remove specific tokens from the list of supported tokens.
Assessed type
Context